Description
A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.
Remediation
References
https://hackerone.com/reports/903521
Related Vulnerabilities
CVE-2022-22963 Vulnerability in maven package org.springframework.cloud:spring-cloud-function-core
CVE-2010-5312 Vulnerability in maven package org.fujion.webjars:jquery-ui
CVE-2021-32854 Vulnerability in maven package org.webjars:textangular
CVE-2023-34092 Vulnerability in maven package org.webjars.npm:vite
CVE-2017-16104 Vulnerability in npm package citypredict.whauwiller